tls_generic_test sanitisation.

I suggest putting the fall-back in some kind of bracket, e.g. "[no error message]", so that its *form* is also different from an actual error message.